nerdexam
Microsoft

AZ-104 · Question #266

You deploy Azure virtual machines to three Azure regions. Each region contains a virtual network. Each virtual network contains multiple subnets peered in a full mesh topology. Each subnet contains…

The correct answer is B. IP flow verify D. Connection troubleshoot. IP flow verify checks if a packet is allowed or denied to or from a virtual machine. The information consists of direction, protocol, local IP, remote IP, local port, and a remote port. If the packet is denied by a security group, the name of the rule that denied the packet is…

Submitted by katya_ua· Mar 4, 2026Configure and manage virtual networking

Question

You deploy Azure virtual machines to three Azure regions. Each region contains a virtual network. Each virtual network contains multiple subnets peered in a full mesh topology. Each subnet contains a network security group (NSG) that has defined rules. A user reports that he cannot use port 33000 to connect from a virtual machine in one region to a virtual machine in another region. Which two options can you use to diagnose the issue? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Options

  • AAzure Virtual Network Manager
  • BIP flow verify
  • CAzure Monitor Network Insights
  • DConnection troubleshoot
  • Eelective security rules

How the community answered

(46 responses)
  • A
    20% (9)
  • B
    61% (28)
  • C
    13% (6)
  • E
    7% (3)

Explanation

IP flow verify checks if a packet is allowed or denied to or from a virtual machine. The information consists of direction, protocol, local IP, remote IP, local port, and a remote port. If the packet is denied by a security group, the name of the rule that denied the packet is returned. While any source or destination IP can be chosen, IP flow verify helps administrators quickly diagnose connectivity issues from or to the internet and from or to the on-premises environment. https://learn.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overview

Community Discussion

No community discussion yet for this question.

Full AZ-104 Practice